Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/wa6NcU7XwuvzaWsIZAv7WsszO5o.roa
File: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (raw, json)
Hash identifier: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=
Subject key identifier: C1:AE:8D:71:4E:D7:C2:EB:F3:69:6B:08:64:0B:FB:5A:CB:33:3B:9A
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 01942144650D5053B3ED4902AA850905D0A8
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/wa6NcU7XwuvzaWsIZAv7WsszO5o.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199875
IP address blocks: 2a00:ad44:3084::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:65:0d:50:53:b3:ed:49:02:aa:85:09:05:d0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1ae8d714ed7c2ebf3696b08640bfb5acb333b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:ad:d6:f4:98:d5:d1:75:c9:e3:75:a6:cb:
f4:4d:e9:8f:a9:76:f2:df:84:4f:1d:00:65:57:e0:
8a:8d:f9:e1:5c:d9:35:4f:94:8c:d4:49:b6:b8:ce:
fc:a7:98:a6:e8:a2:4f:12:05:39:96:27:f9:0a:aa:
73:e3:b5:34:52:85:84:44:1a:c7:7c:c2:85:8e:92:
a2:0d:e6:8d:69:ce:e9:39:1e:1c:38:87:4a:cf:5b:
ac:fb:1d:32:f2:a9:5c:ef:d7:07:c3:42:41:d9:7a:
02:c1:36:9e:f7:f9:d6:29:24:09:1d:20:23:e6:d4:
0c:74:e2:59:a4:ab:7f:e4:96:af:33:1f:9c:e9:9c:
ef:3b:fc:4c:26:ed:70:23:81:60:23:7c:90:c4:00:
37:01:a5:e5:3e:27:29:2b:eb:98:67:22:f5:54:78:
7a:09:c2:39:97:ef:e7:26:82:27:c1:23:3b:ce:a3:
41:05:b8:2c:8e:92:0d:da:04:b5:4f:b0:87:b4:35:
50:fc:e6:08:05:86:63:6c:95:c1:f5:72:a3:05:6a:
10:f7:37:59:c8:cb:8f:51:dd:81:2b:8a:55:3b:18:
13:a3:0e:e3:d7:6b:94:d2:79:60:71:6c:64:4d:8d:
d7:dc:5b:b8:62:80:2e:34:91:fb:17:74:04:52:75:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:8D:71:4E:D7:C2:EB:F3:69:6B:08:64:0B:FB:5A:CB:33:3B:9A
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/wa6NcU7XwuvzaWsIZAv7WsszO5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad44:3084::/48
Signature Algorithm: sha256WithRSAEncryption
4d:2f:a2:28:b6:87:f6:e9:eb:c0:a4:43:19:c5:c8:e0:fc:db:
ff:fc:20:36:0f:25:1d:2f:32:c6:1e:ff:be:a5:1a:d3:ef:f3:
d0:ec:46:0e:25:f0:02:e8:48:58:f1:c7:52:bc:06:eb:f6:2f:
d2:63:57:41:e5:20:d5:4b:2f:f9:a6:7c:1d:16:cd:51:d2:90:
0c:a6:da:ee:49:d7:14:5a:05:10:e4:c1:16:f9:f0:d9:16:cf:
9c:7a:d9:3c:af:dd:44:05:bf:d3:1a:1e:d3:ca:7f:bc:ee:63:
cd:c4:e0:48:ec:74:f7:75:08:c5:dc:98:43:67:38:ad:35:83:
96:44:3f:67:2d:a8:da:35:db:d3:96:af:3d:2c:f3:cf:d8:4f:
e6:1a:71:a8:5c:17:51:a3:4e:a1:35:e0:2e:c9:87:bb:49:3f:
79:3e:59:9c:d3:47:06:96:60:c0:00:2b:3e:fa:03:af:78:c1:
d1:bf:e6:2f:2b:9d:c4:31:5f:cc:e8:ac:11:7f:41:d5:4a:d0:
55:26:08:1f:fa:06:54:13:d0:4b:53:3e:4d:7a:99:4a:39:26:
55:6a:f5:ed:fa:88:28:56:8b:f2:91:f4:a7:10:97:61:77:fd:
4a:39:6d:82:ab:7c:fa:85:38:ce:50:e4:66:87:c6:7f:77:ca:
01:f8:f5:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhRGUNUFOz7UkCqoUJBdCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2U1OTA3MTFhZTdmY2IwMTZlZWI3Mzc2YjBhN2ZjNzY2
MWNiMTMwHhcNMjUwMTAxMDk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWFlOGQ3MTRlZDdjMmViZjM2OTZiMDg2NDBiZmI1YWNiMzMzYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC+t1vSY1dF1yeN1psv0TemPqXby
34RPHQBlV+CKjfnhXNk1T5SM1Em2uM78p5im6KJPEgU5lif5Cqpz47U0UoWERBrH
fMKFjpKiDeaNac7pOR4cOIdKz1us+x0y8qlc79cHw0JB2XoCwTae9/nWKSQJHSAj
5tQMdOJZpKt/5JavMx+c6ZzvO/xMJu1wI4FgI3yQxAA3AaXlPicpK+uYZyL1VHh6
CcI5l+/nJoInwSM7zqNBBbgsjpIN2gS1T7CHtDVQ/OYIBYZjbJXB9XKjBWoQ9zdZ
yMuPUd2BK4pVOxgTow7j12uU0nlgcWxkTY3X3Fu4YoAuNJH7F3QEUnWR8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMGujXFO18Lr82lrCGQL+1rLMzuaMB8GA1UdIwQY
MBaAFLzOWQcRrn/LAW7rc3awp/x2YcsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUt
MDVkYjQ5N2FjNDU1LzEvd2E2TmNVN1h3dXZ6YVdzSVpBdjdXc3N6TzVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUtMDVkYjQ5N2FjNDU1
LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgCtRDCE
MA0GCSqGSIb3DQEBCwUAA4IBAQBNL6Iotof26evApEMZxcjg/Nv//CA2DyUdLzLG
Hv++pRrT7/PQ7EYOJfAC6EhY8cdSvAbr9i/SY1dB5SDVSy/5pnwdFs1R0pAMptru
SdcUWgUQ5MEW+fDZFs+cetk8r91EBb/TGh7Tyn+87mPNxOBI7HT3dQjF3JhDZzit
NYOWRD9nLajaNdvTlq89LPPP2E/mGnGoXBdRo06hNeAuyYe7ST95Plmc00cGlmDA
ACs++gOveMHRv+YvK53EMV/M6KwRf0HVStBVJggf+gZUE9BLUz5NeplKOSZVavXt
+ogoVovykfSnEJdhd/1KOW2Cq3z6hTjOUORmh8Z/d8oB+PX6
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:53:25 2025 by rpki-client